CVE-2026-28754 (MEDIUM 4.8) · Watchpost